Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/BF074D607AB911F19544E1E5CE1D38B0.roa
File:                     BF074D607AB911F19544E1E5CE1D38B0.roa (raw, json)
Hash identifier:          qFoBsejg9FN/FDV2O6h7qkRNG5vip+EUMILXAArsA6s=
Subject key identifier:   FC:0C:0A:40:14:3C:6B:73:57:FB:7F:6D:D5:C2:32:79:61:F0:82:7A
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       07D5
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/BF074D607AB911F19544E1E5CE1D38B0.roa
Signing time:             Wed 08 Jul 2026 10:42:42 +0000
ROA not before:           Wed 08 Jul 2026 10:42:37 +0000
ROA not after:            Thu 08 Jul 2027 10:42:37 +0000
asID:                     212122
IP address blocks:        196.44.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 12 Jul 2026 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2005 (0x7d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Jul  8 10:42:37 2026 GMT
            Not After : Jul  8 10:42:37 2027 GMT
        Subject: CN=6a4e29a2-6bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5e:3f:c1:39:7d:06:de:d8:1b:2e:90:98:34:
                    9d:97:5e:7f:8e:48:07:f2:b1:75:5a:8e:bc:9f:53:
                    2e:bc:7b:86:ff:7c:5c:ca:2d:0b:3e:9f:c0:58:3d:
                    ad:b4:6d:8f:7f:c4:29:10:90:51:5d:ec:22:19:00:
                    97:d0:57:ae:a9:a2:7b:0a:52:59:98:db:42:63:66:
                    10:b0:7f:7f:ac:72:5d:cc:8b:24:49:1b:0e:b8:2f:
                    8a:34:1d:99:06:8f:5e:69:32:46:1b:5c:20:d6:1e:
                    14:a0:d6:4f:27:1c:30:b1:cc:3f:d4:bd:c1:44:9a:
                    11:3a:d2:2c:94:9c:c2:f1:43:96:df:de:70:0b:08:
                    04:d7:23:f9:38:0b:20:be:0d:2e:36:2e:3a:73:39:
                    c3:8a:45:74:44:a2:42:85:a4:91:26:b1:c9:ef:a8:
                    b1:39:ac:80:5e:c2:d7:c3:d7:4b:80:8e:07:65:79:
                    c0:47:27:37:7e:41:2a:4e:87:d6:87:0d:98:f1:87:
                    a3:65:a8:e2:bc:c6:ea:03:32:a8:a0:46:2f:42:40:
                    1d:d7:27:80:9f:b2:2e:d0:49:12:63:f3:26:37:ee:
                    b6:9f:b9:01:71:f1:a3:a7:93:c5:be:48:ec:9c:64:
                    cf:52:5f:c4:3e:c8:99:98:fc:e8:a7:0a:0f:2e:db:
                    b9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0C:0A:40:14:3C:6B:73:57:FB:7F:6D:D5:C2:32:79:61:F0:82:7A
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/BF074D607AB911F19544E1E5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.44.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:cf:b8:cc:41:9c:86:82:2e:12:b1:89:cd:a3:50:ad:97:c8:
         da:f1:b7:45:c7:ca:5e:b4:f9:50:d5:ed:a6:cd:0a:2e:14:38:
         b7:ec:71:b9:dd:e9:a1:e5:f5:e6:d3:69:92:be:fd:ab:83:0a:
         db:43:b9:fa:85:25:8b:fb:6c:6b:95:35:9d:27:f4:3f:5e:b9:
         e0:37:22:50:58:2d:f6:1a:8d:1b:ed:5b:f5:bc:6d:b8:54:a0:
         d7:9b:a2:a3:b8:f4:c9:1b:ed:d5:18:ff:9a:72:04:47:2e:8b:
         80:ab:f9:fa:55:c9:ec:77:3e:2a:cc:10:1a:c2:b0:fa:c4:b0:
         31:96:98:5e:cc:37:51:13:92:df:e1:02:92:01:a6:c4:6d:bc:
         41:0d:7d:03:0b:ff:9c:c4:13:b5:77:33:23:d3:0d:3b:98:35:
         0e:d4:33:eb:1d:35:d0:44:b3:81:a1:22:12:5c:c6:99:2b:3a:
         b4:89:0b:53:95:b5:3a:bb:89:9a:f6:fd:00:98:29:04:db:fc:
         f6:a6:b8:67:7f:26:88:20:b8:4b:6f:01:ac:17:a4:5e:ba:95:
         67:23:8e:ac:9e:69:71:9d:8d:ad:85:1a:8f:65:6a:ac:59:80:
         5f:9e:61:89:94:6d:b7:6c:fc:d4:3e:14:26:e1:4a:f6:f1:c1:
         be:83:23:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:45:26 2026 by rpki-client